Fyslide

Workflow & AI · 5 min read

MCP server for social media content: local or hosted, which tools, and what to ask

An MCP server lets an AI agent use an app's actions, such as listing designs, creating slideshows and exporting. A local server runs on your computer, a hosted one runs at a vendor, and the risk grows with every tool that can change or publish things. Ask the questions below before you connect one.

Updated · Published by Fyslide

What does an MCP server do for social media content?

It gives an AI agent a set of actions in one app. Instead of you copying text between a chat window and a design tool, the agent calls named tools: list the designs, create a slideshow, change a text, export the slides. The agent, such as Claude Code, Codex or Cursor, is the client. The app side is the server. For the plain definition, see what an MCP server is.

For social media, the question is not whether a server exists. It is what the tools can reach, and where the server runs.

Is the server local or hosted?

Local serverHosted serverSelf-hosted server
RunsOn your computer, started by your agent; it needs the app runningAt the vendorOn a machine you run
Your contentStays where the app keeps itPasses through the vendorPasses through your own server
Accounts it can touchOnly what the app itself holdsThe accounts you connect at the vendorThe accounts you connect to your server
Works whenThe app is running and licensedThe vendor's service is upYour server is up

As of 5 November 2026, the vendor pages we read show a local server (Fyslide), an open-source server you can run yourself (Postiz) and several vendors that list an MCP server without saying where it runs:

Ask each of the vendors listed as "location not stated" where its server runs before you assume either of the first two columns of the table applies.

Access can cost extra. Blotato's trial excludes the API and MCP, and PostNitro charges $10 a month for API, MCP and CLI on its non-Plus plans.

What tools does a slideshow server expose?

The tool list tells you what a wrong call can do. Sort the groups by how hard they are to undo.

Tool groupWhat the agent can doReversible?
ReadList what exists, such as designsNothing changes
CreateMake a new slideshow from a design and a topicA new item you can delete
EditChange texts, replace a picture on a slideChanges an existing item; keep a copy first (Fyslide saves a version with each edit)
ExportWrite slide files to a folderAdds files on disk
PublishPost or schedule to a social accountPublic, and others may see it

Fyslide's server covers the first four groups of this table, and the app does not post to TikTok or Instagram today. The MCP docs sort its 21 tools differently, into three groups: read, make and change. Steps that cost money, such as AI images, first come back as a plan with a token, and the confirm tool runs them only after you agree. A hosted tool with a publish group is a different category of risk, because one wrong call can put a draft in public.

Which security questions should you ask?

  1. Where does it run, and who can reach it? A local server should answer only your own computer.
  2. Which tools exist? Ask for the full list. Read-only first, publish last.
  3. Which accounts or tokens does it hold? A hosted publishing server holds a login to your TikTok account.
  4. Is the TikTok connection approved? TikTok says content posted through its API by unaudited clients is restricted to private viewing (TikTok for Developers (opens in a new tab), as of 4 August 2026). Postiz's docs say self-hosters must register their own TikTok app, and until it is audited, posts are forced private (Postiz docs (opens in a new tab)).
  5. What leaves your computer? A local server can still hand your text to the agent. The agent is a separate program, so check where it sends what it reads.
  6. Can you approve each write? Check whether your agent asks before it runs a tool, and keep that on for edit and publish tools.
  7. How do you revoke access? You should be able to stop the server and remove the token in one place.
  8. Who maintains it? Open-source code can be read. A hosted server is a service you trust.

One more risk applies to any tool-using agent. If the agent reads text from untrusted places, such as web pages, comments or files from strangers, that text can contain instructions. Keep publishing tools out of sessions that read untrusted content.

How do you try a server safely?

  1. Connect it to a throwaway project with no real accounts attached.
  2. Ask the agent to list what it can see and read the answer.
  3. Ask for one create or edit action, then open the result yourself.
  4. Turn on write tools one group at a time.
  5. Enable publishing last, and only with approval on every call.

For a worked example with a local server, read Claude Code and TikTok slideshows and the guide to Claude Code via MCP.

Does an MCP server cost money?

It depends on the tool. As of 5 November 2026, Blotato's trial excludes MCP and PostNitro charges $10 a month extra on its non-Plus plans. Fyslide includes its local server in the app, which must be running and licensed.

Can an MCP server post to TikTok for me?

Some can. As of 5 November 2026, Blotato's MCP server publishes photo slideshows with scheduling. Fyslide's does not post today; posting is Coming soon, included in your lifetime access as an update.

Sources

  1. Fyslide FAQ, Fyslide. Checked November 5, 2026.
  2. Blotato pricing, Blotato. Checked November 5, 2026.
  3. Blotato MCP for TikTok, Blotato. Checked November 5, 2026.
  4. PostNitro plans, PostNitro. Checked November 5, 2026.
  5. SlideStorm homepage and pricing, SlideStorm. Checked November 5, 2026.
  6. Contentdrips pricing, Contentdrips. Checked November 5, 2026.
  7. Hypefury homepage, Hypefury. Checked November 5, 2026.
  8. Taplio pricing, Taplio. Checked November 5, 2026.
  9. Postiz pricing, Postiz. Checked November 5, 2026.
  10. gitroomhq/postiz-app on GitHub, Postiz (GitHub). Checked November 5, 2026.
  11. Postiz docs: TikTok provider (self-host), Postiz. Checked November 5, 2026.
  12. CarouselBot (carousel.bot) homepage, CarouselBot. Checked November 5, 2026.
  13. Content Posting API: Get Started, TikTok for Developers, 2026-08-04. Checked November 5, 2026.